Skip to content

Move all system prompts outside the repository for security #781

@tanweersalah

Description

@tanweersalah

Description:
Currently, our system prompts (security, guardrails, and other sensitive configurations) are stored directly in this repository. Since the repo is public, this exposes potentially sensitive information that could be misused or give insights into our internal security measures.

Problem:

  • Exposes internal security/guardrail logic to the public.
  • Risk of malicious actors circumventing safeguards.
  • Violates best practices for handling sensitive configuration.

Proposed Solution:

  • Move all system prompts and guardrail configurations outside the repo.
  • Store them securely in a private configuration store (e.g., environment variables, private config repo, or secrets manager).
  • Reference them dynamically at runtime, rather than embedding them in source code.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions